Analysis
- max time kernel
68s - max time network
152s - platform
windows10_x64 - resource
win10v20210408 - submitted
03/10/2021, 07:37
General
- Target 5a36ca054903b13eccebd9476e4f59c8.exe
- Size 230KB
- Sample211003-jft2bafba3
- SHA256 5b9c3634412b0c729160d9f275c2ad8b1b26a2ab8b5053803445bbf48256d44c
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\5a36ca054903b13eccebd9476e4f59c8.exe"C:\Users\Admin\AppData\Local\Temp\5a36ca054903b13eccebd9476e4f59c8.exe"1⤵